Thursday, April 09, 2009

The TSA Strip Search Machines

That's what a screener sees on one version of the "whole body imaging" machines that the TSA is making plans to move front and center into airport checkpoints. The woman in the image, a TSA official posing to show how this new marvel works, was fully clothed.

Other models of the machines being tested show even more detail, I am told. Two basic technologies have been involved in the tests: Backscatter and millimeter wave. The TSA Web site has a lot of detail on this and other new technologies in the works.

One of the questions -- aside from whether people will actually put up with this (I mean, they're going to be running your kids through these things) is the quesestion of whether the images can be stored.

Yes they can.

Will they be?

No, says the TSA. The machines' image storage capability have been and be disabled, says the TSA.

We shall see. Has anybody grabbed the domain name celebritiesstrippedat theairport.com yet? And all of the creepy variations?

Here's the TSA's official position on storing the images, from a "privacy impact assessment" the agency posted last fall.

"Introduction. P. 4)While the equipment has the capability of collecting and storing animage, the image storage functions will be disabled by themanufacturer before the devices are placed in an airport and willmot have the capability to be activated by operators. Images will bemaintained on the screen only for as long as it takes to resolve anyanomalies; if a TSO sees a suspicious area or prohibited item, theimage will remain on the screen until the item is cleared either bythe TSO recognizing the item on the screen, or by a physicalscreening by the TSO with the individual. The image is deleted inorder to permit the next individual to be screened. The equipmentdoes not retain the image. In addition, TSOs will be prohibitedfrom bringing any device into the viewing area that has anyphotographic capability, including cell phone cameras. Rulesgoverning the operating procedures of TSOs using this WBI equipmentare documented in standard operating procedures (SOP), andcompliance with these procedures is reviewed on a routine basis.Due the sensitivity of the technical and operational details, theSOP will not be publicized, however, TSOs receive extensive trainingprior to operating WBI technology.

(4. Principle of Minimization . p. 7)

Principle: DHS should only collect PII that is directly relevant andnecessary to accomplish the specified purpose(s) and only retain PIIfor as long as is necessary to fulfill the specified purpose(s). PIIshould be disposed of in accordance with DHS records dispositionschedules as approved by the National Archives and RecordsAdministration (NARA).

WBI technologies identify objects on the outside of the physicalbody and do not reveal implants beneath the surface of the skin. TSAdoes not save the image in connection with the use of WBItechnologies. While the technology can be configured to storeimages, TSA considered the privacy issues of this storage featureand carefully evaluated all potential uses of the images fortraining, investigations, or possible prosecution of persons caughtwith prohibited items. Based on this evaluation, TSA decided to havethe manufacturer disable the data storage capabilities prior todelivery to TSA. Individual operators do not have the capability toreverse the capability to enable image retention. As a result, theimage will only be available during the time the individual is beingscreened and will be deleted immediately thereafter.

(7. Principle of Security)

Principle: DHS should protect PII, including images, throughappropriate security safeguards against risks such as loss,unauthorized access or use, destruction, modification, or unintendedor inappropriate disclosure.WBI data is transmitted between the checkpoint and the viewer by alandline connection and cannot be lost, modified, or disclosed.

Backscatter images are encrypted. Millimeter wave data istransmitted in a proprietary format that cannot be decipheredwithout the proprietary technology. TSA’s decision not to retainimages mitigates further data storage security issues. In addition,the computers used to process and present the images will be lockedwith both physical and software controls to prevent the insertion ofany storage media or other communication devices. Administrativecontrols limit access to the remote viewing rooms to TSOs andprohibit TSOs from bringing photographic devices, to include cellphone cameras, into the room in which images are viewed."

1 comment:

Interacting with a computer using a keyboard and mouse is really starting to get old.EOT Cranes I recently purchased a Tablet netbook and I have found the touch screen interface a pleasure to use over using the mouse; coupled with Vista's excellent handwriting recognition, the tablet has become my number one machine for use daily.

Bio

Joe Sharkey's work appears in major national and international publications. For 19 years until 2015 he was a weekly columnist for the New York Times. He is now a weekly travel and entertainment columnist with the global website Travel.Buzz, as well as an adjunct professor of journalism at the University of Arizona, He has written five books, four non-fiction and a novel, one of which is in development as a movie. Previously, he was an assistant national editor at the Wall Street Journal and a reporter and columnist with the Philadelphia Inquirer.
On Sept. 29, 2006, he was one of seven people on a business jet who survived a mid-air collision with a 737 over the Amazon. All 154 on the 737 died. His report on the crash appeared on the front page of the New York Times and later in the Sunday Times of London magazine.
He and his wife Nancy (who is a professor of journalism at the University of Arizona) live in Tucson with horses and parrots. He is working on a new novel about an international travel writer who hates to travel.
"JoeSharkey.com" is Copyright (c) 2006-2015 by Joe Sharkey.